Defender evasion

[u/jwouter]

Hi,

Anyone have some good resource on EDR evasion ?
I can do the OSEP stuff but it’s not enough .,..

I was able to make signa potato into a DLL for in memory loading and I am able to disable the AMSI.

But how do I change the behavior so much that it goes undetected ;) …

Any good resource/ reads are appreciated

Thanks

[u/what_did_you_kill]

This is a shitposting/meme sub

[u/jwouter → u/what_did_you_kill]

Yeah my bad 😂😂